MAL-2025-189516 Malicious code in sirius-lynx-antares-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1b1189742e5aae02454df7ad46c469deecbe1d18ea01b1feb3d6b00b7c548d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186693 Malicious code in elara-express-babel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab76e836e3b58249794cc58f0387e341cbcb4f07e8b2c7fcde64da9830361a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189774 Malicious code in superposition-nucleosynthesis-mui-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063fcb24a40b89768bf94bc97149458417097f11c41885bc62e4b401f180fc52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189836 Malicious code in technocracy-protoplanetarydisk-xanthus-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500dd7d62fdae022c87c95e3d1696430225ac3b8b2ce7eb189361de65a02fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187707 Malicious code in kronos-lynx-brane-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b0fb92e5f1f3a612ab9477511fd26789ef0566213df6d8bc93ee1ffa10bd9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188451 Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc399df1baa583fe9c5b3c3d19473cebd1498ab6c0de46cdc1ef484368df6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190248 Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25aeb382914a3761927c689bda3eefcfcfc97e0a1a8d7b2dfbecea0ce3f3077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187601 Malicious code in jekyll-deneb-uglify-js-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109a31ec4ecb8c6fe12865a5cd17692e49813a95e0fe551e48adb90c53366ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188202 Malicious code in nebula-development-less-loader-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176d9ec969819536ec693125456e7ec41bb0dcc6c65811409b1a99ffb0fbf13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188914 Malicious code in proxima-kronos-charon-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b83b5da130d0cc0ec2d6729beb3684e2dd6f215845318a3c6ce2d10550e0ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185696 Malicious code in await-lacerta-ganymede-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3768dcf0227735127c0afebbc782199e7566c7e0b7bd1a357fc0512632645940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190296 Malicious code in websockets-kinetic-janus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b40b5853ee3b4de685feaf1b32ad292ac1711fbe189faa330594cdd0f9238a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190301 Malicious code in weywot-perseus-parallax-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fccf69d07016c6dfafa7312d220affa347019aaa3bb135b3acd2daef6d21939f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185965 Malicious code in cache-meta-root-try-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e240ecaa5180d2c3bb0773d383b7d3624ca22e35d3c052302961ef5c975b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189201 Malicious code in resolvers-query-comet-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f32d247fb9e7fef3137c36bba9f109b99a98b0e64d2c7664eab01c964c650d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189465 Malicious code in server-publish-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a79a38e0a196ea73bb64460ddb5a414d0daca9ff3b5f70eb45ce4fc3959871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188785 Malicious code in postcss-mongodb-astrometry-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d91bb98b69696c0d64838fcc70a1807cd0481ffb5d3b10c23c6c4e4737ae29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190375 Malicious code in xenon-release-it-telesto-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156c3f239097b5a3342ea65e94f1f7759096530b2c5377c81f15266c47ac3366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187091 Malicious code in gamma-good-socket-enum-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31fb8ce741f087b55ea1186167a688e06a6393fa56520189107a29c13cca94fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187106 Malicious code in ganymede-nestjs-izar-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a230d94bc32273176374265684eb0eccddbdcba4bbc1819c7f8b868ec0f5e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...